退出 ClashMeta 不会清除 iptables

[ghost]

ctrl + c 退出，会清除 iptables ，
直接关闭终端窗口，不会清除。

systemctl stop clash-meta 会清除
systemctl disable --now clash-meta 不会清除

[Adlyq]

@yourxx 这不是很合理吗

[MarksonHon]

@yourxx 你枪杀进程，进程哪还能帮你清除防火墙规则

[vj23456]

@MarksonHon 你把我杀死了，我还要负责把自己埋了

[ghost]

清除得不是很彻底，有时又彻底，残留的规则也经常不一样。

root@ubuntu-desktop:~# systemctl stop clash
root@ubuntu-desktop:~# systemctl start clash
root@ubuntu-desktop:~# systemctl stop clash
root@ubuntu-desktop:~# iptables-save
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*nat
:PREROUTING ACCEPT [2:368]
:INPUT ACCEPT [2:368]
:OUTPUT ACCEPT [2:135]
:POSTROUTING ACCEPT [2:135]
:clash_dns_output - [0:0]
-A PREROUTING ! -s 172.17.0.0/16 ! -d 127.0.0.0/8 -p udp -m udp --dport 53 -j REDIRECT --to-ports 1053
-A PREROUTING ! -s 172.17.0.0/16 ! -d 127.0.0.0/8 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 1053
-A OUTPUT -p udp -m udp --dport 53 -j clash_dns_output
-A OUTPUT -p tcp -m tcp --dport 53 -j clash_dns_output
-A POSTROUTING -o ens160 -m addrtype ! --src-type LOCAL -j MASQUERADE
COMMIT
# Completed on Tue Apr 19 13:30:14 2022
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*mangle
:PREROUTING ACCEPT [35:2775]
:INPUT ACCEPT [35:2775]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [28:3516]
:POSTROUTING ACCEPT [28:3516]
:clash_output - [0:0]
:clash_prerouting - [0:0]
-A PREROUTING -j clash_prerouting
-A OUTPUT -o ens160 -j clash_output
COMMIT
# Completed on Tue Apr 19 13:30:14 2022
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*filter
:INPUT ACCEPT [35:2775]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [29:3988]
-A FORWARD -o ens160 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o ens160 -j ACCEPT
-A FORWARD -i ens160 ! -o ens160 -j ACCEPT
-A FORWARD -i ens160 -o ens160 -j ACCEPT
COMMIT
# Completed on Tue Apr 19 13:30:14 2022

[ghost]

...
interface-name: ens160 这行可以不写，程序会自动识别。
iptables:
enable: true
inbound-interface: ens160 这行必须要写。
...

在不写 inbound-interface 的时候也可以自动识别就方便多了。